From b0e67591de16f45de96b9d03c59a2629d74d6ff8 Mon Sep 17 00:00:00 2001
From: Chris Phillipson <christopher.a.phillipson@gmail.com>
Date: Wed, 21 Oct 2026 19:45:25 -0700
Subject: [PATCH 1/2] chore(deps): pnpm + Renovate updates for the 2026-10
 security releases
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- edit package.json (1× "packageManager": "pnpm@11.2.2" → "packageManager": "pnpm@11.28.6")
- create renovate.json
- delete .github/dependabot.yml

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/dependabot.yml | 22 --------------
 package.json           |  2 +-
 renovate.json          | 65 ++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 66 insertions(+), 23 deletions(-)
 delete mode 100644 .github/dependabot.yml
 create mode 100644 renovate.json

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index c20dd03..0000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,22 +0,0 @@
-version: 2
-updates:
-  # JS dependencies (Dependabot's "npm" ecosystem understands the pnpm lockfile)
-  - package-ecosystem: 'npm'
-    directory: '/'
-    schedule:
-      interval: 'weekly'
-    open-pull-requests-limit: 10
-    groups:
-      # batch low-risk updates into single PRs
-      dev-dependencies:
-        dependency-type: 'development'
-        update-types: ['minor', 'patch']
-      production-dependencies:
-        dependency-type: 'production'
-        update-types: ['minor', 'patch']
-
-  # GitHub Actions used in workflows
-  - package-ecosystem: 'github-actions'
-    directory: '/'
-    schedule:
-      interval: 'weekly'
diff --git a/package.json b/package.json
index acdf8f9..f21da6d 100644
--- a/package.json
+++ b/package.json
@@ -4,7 +4,7 @@
   "description": "A browser-based 3D synthwave kart racer (Three.js + Vite).",
   "license": "MIT",
   "type": "module",
-  "packageManager": "pnpm@11.2.2",
+  "packageManager": "pnpm@11.28.6",
   "engines": {
     "node": ">=26",
     "pnpm": ">=11"
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..d7c070a
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,65 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "description": "Managed from pacphi/mise-dotfiles. Replaces Dependabot version updates (2026-10-21).",
+  "extends": [
+    "config:recommended"
+  ],
+  "minimumReleaseAge": "3 days",
+  "internalChecksFilter": "strict",
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "labels": [
+      "security"
+    ]
+  },
+  "packageRules": [
+    {
+      "description": "npm: settings",
+      "matchCategories": [
+        "js"
+      ],
+      "schedule": [
+        "* 0-5 * * 1"
+      ]
+    },
+    {
+      "description": "npm: group dev-dependencies",
+      "matchCategories": [
+        "js"
+      ],
+      "groupName": "dev-dependencies",
+      "matchUpdateTypes": [
+        "minor",
+        "patch"
+      ],
+      "matchDepTypes": [
+        "devDependencies"
+      ]
+    },
+    {
+      "description": "npm: group production-dependencies",
+      "matchCategories": [
+        "js"
+      ],
+      "groupName": "production-dependencies",
+      "matchUpdateTypes": [
+        "minor",
+        "patch"
+      ],
+      "matchDepTypes": [
+        "dependencies"
+      ]
+    },
+    {
+      "description": "github-actions: settings",
+      "matchCategories": [
+        "ci"
+      ],
+      "schedule": [
+        "* 0-5 * * 1"
+      ]
+    }
+  ],
+  "prConcurrentLimit": 10
+}

From f47c2bc1aad1367a2f7026c74e16b76b3aba1f55 Mon Sep 17 00:00:00 2001
From: Chris Phillipson <christopher.a.phillipson@gmail.com>
Date: Thu, 22 Oct 2026 06:13:51 -0700
Subject: [PATCH 2/2] style: format renovate.json with the repo's formatter

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 renovate.json | 50 ++++++++++++--------------------------------------
 1 file changed, 12 insertions(+), 38 deletions(-)

diff --git a/renovate.json b/renovate.json
index d7c070a..1cde699 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,64 +1,38 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "description": "Managed from pacphi/mise-dotfiles. Replaces Dependabot version updates (2026-10-21).",
-  "extends": [
-    "config:recommended"
-  ],
+  "extends": ["config:recommended"],
   "minimumReleaseAge": "3 days",
   "internalChecksFilter": "strict",
   "osvVulnerabilityAlerts": true,
   "vulnerabilityAlerts": {
     "enabled": true,
-    "labels": [
-      "security"
-    ]
+    "labels": ["security"]
   },
   "packageRules": [
     {
       "description": "npm: settings",
-      "matchCategories": [
-        "js"
-      ],
-      "schedule": [
-        "* 0-5 * * 1"
-      ]
+      "matchCategories": ["js"],
+      "schedule": ["* 0-5 * * 1"]
     },
     {
       "description": "npm: group dev-dependencies",
-      "matchCategories": [
-        "js"
-      ],
+      "matchCategories": ["js"],
       "groupName": "dev-dependencies",
-      "matchUpdateTypes": [
-        "minor",
-        "patch"
-      ],
-      "matchDepTypes": [
-        "devDependencies"
-      ]
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchDepTypes": ["devDependencies"]
     },
     {
       "description": "npm: group production-dependencies",
-      "matchCategories": [
-        "js"
-      ],
+      "matchCategories": ["js"],
       "groupName": "production-dependencies",
-      "matchUpdateTypes": [
-        "minor",
-        "patch"
-      ],
-      "matchDepTypes": [
-        "dependencies"
-      ]
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchDepTypes": ["dependencies"]
     },
     {
       "description": "github-actions: settings",
-      "matchCategories": [
-        "ci"
-      ],
-      "schedule": [
-        "* 0-5 * * 1"
-      ]
+      "matchCategories": ["ci"],
+      "schedule": ["* 0-5 * * 1"]
     }
   ],
   "prConcurrentLimit": 10